The IT Professional's Blueprint for Compliance

Cybersecurity compliance frameworks exist to assist organizations in constructing robust cybersecurity strategies that will keep them ahead of threats. The frameworks are often ambiguous, making it challenging to ensure the outlined controls are met. Each framework is worded differently, even when pointing to the same technology needed, which only adds to the complexity of interpreting their requirements.  

This document will outline an organization's steps to comply with various cybersecurity frameworks. As organizations move closer to compliance with a single framework, they will inevitably gain compliance across multiple frameworks. Implementing a single software or technology often satisfies multiple control areas in numerous compliance frameworks. Read on to see which practices need to be implemented to build a successful blueprint for compliance.

Highlighted Frameworks:

• NIST SP 800-171
• NIST Cybersecurity Framework (CSF)
• The Center for Internet Security (CIS) Critical Security Controls (CSC)
• The Essential Eight Maturity Model
• Cyber Essentials
• The Health Insurance Portability and Accountability Act (HIPAA)

‍